Research of Information Security Quantitative Evaluation Method

Abstract:

Information security risk assessment is an important component of information system security engineering. Adopting the combination of qualitative and quantitative to qualitative evaluation method, based on the theory of fuzzy membership, every assessment indicator can be quantized with the method of integration of the qualitative to the quantitative. And adopting the objective method of fuzzy transformation to try to eliminate the initiative judgments, thus to ensure that the information security assessment is truly reflected, and solving such problems as the data collection in the process of information security evaluation, the combination of qualitative and quantitative evaluation, which are both very difficult to deal with. Consequently, the evaluation method is more scientific, comprehensive and maneuverability.

• Periodical: Applied Mechanics and Materials (Volumes 513-517)
• Pages: 369-372
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.513-517.369
• Online since: February 2014
• Authors: Wen Long Zang*
• Keywords: Information Security, Qualitative, Quantitative, Risk Assessment

References

[1] Shen Chang-xiang. On strengthening information security system thinking, Hubei Science and Technology Press, (2002).

[2] Wang Shouyun. Yu Jingyuan, Dai Ruwei, et a1. Open Complex Giant Systems [M]. Zhejiang Science＆Technology Publishing House, 1996, 56—158.

[3] Li Yang. The Research of Electronic Commerce Security's Problem, Computers and telecommunications 2008, 04. 72-75.

[4] Qin Shoukang, et a1. Theories and Applications of Synthetic Evaluation [M]. Beijing: Publishing House of Electronics Industry, 2003, 94—135.

[5] Guan H S. E-Commerce Security and Management [M]. Beijing: Science Press, (2006).